Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File: 7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier: 4LqhU/PjM+EINzcU1uUHe2tejGZmQCRTJwrf1fY0UR8=
Subject key identifier: 72:D6:BA:AE:10:28:FD:E3:B5:A4:7C:B0:FA:08:57:84:59:12:71:F2
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer: /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial: 01964E22DE227628B9FEB341B0BBA16B7CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number: 02EF
Signing time: Sat 19 Apr 2025 13:00:29 +0000
Manifest this update: Sat 19 Apr 2025 13:00:29 +0000
Manifest next update: Sun 20 Apr 2025 13:00:29 +0000
Files and hashes: 1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: aQfuc0VKY9VclJ/DxvEcrLe3nBWKWkzQVK1RnVlJJSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:22:de:22:76:28:b9:fe:b3:41:b0:bb:a1:6b:7c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Validity
Not Before: Apr 19 13:00:29 2025 GMT
Not After : Apr 20 13:00:29 2025 GMT
Subject: CN=72d6baae1028fde3b5a47cb0fa085784591271f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:25:2b:86:69:41:2d:ac:97:0f:f1:19:61:
69:a2:ce:cb:27:66:49:12:5c:91:ea:0f:86:64:aa:
1f:72:4c:f5:43:10:5e:ef:64:55:2d:7c:a0:54:d5:
07:d6:21:4c:ff:be:c2:dd:f5:66:33:5c:c6:dc:ad:
12:c7:a8:7f:f1:a3:14:05:f0:aa:4f:77:69:8f:31:
57:ab:93:e1:6e:08:45:17:67:0e:01:3e:ff:7a:5d:
31:4d:86:19:89:ac:82:72:22:7c:36:1b:e8:3a:f9:
db:db:70:71:9a:d8:81:b8:e2:7c:9d:28:a3:b9:bb:
11:00:a7:49:c5:f9:76:07:a4:d7:78:57:55:3f:cf:
ee:5d:fe:15:7b:65:bd:5f:27:0c:45:b1:bb:93:5f:
56:63:e4:56:68:39:a7:6a:0a:c5:61:39:21:6b:b5:
38:2b:e5:37:48:75:ae:df:ee:f0:97:26:47:53:35:
a0:fd:eb:1c:26:1a:a5:c8:ab:b5:f6:3b:61:51:ca:
3f:e9:09:9c:49:e8:0a:4f:89:3d:21:3a:d7:d8:7b:
22:cf:37:09:c9:08:b4:30:8d:34:6c:02:5d:5a:15:
1b:8b:5a:f0:0e:9a:7d:07:d3:40:a7:d5:23:85:5d:
09:3b:17:5a:ac:07:82:98:91:e6:53:57:59:38:d8:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D6:BA:AE:10:28:FD:E3:B5:A4:7C:B0:FA:08:57:84:59:12:71:F2
X509v3 Authority Key Identifier:
keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c3:8a:c2:30:ca:35:51:f3:9b:40:02:b8:01:3d:a2:d4:d2:
08:68:18:82:e3:b7:39:1b:fc:8f:c6:ba:ff:4c:25:ba:f6:da:
16:69:2f:58:13:28:d3:6e:cf:99:ca:47:9c:24:b1:30:87:e4:
cc:46:e0:e4:3a:3b:25:f6:b0:15:66:8c:c3:a2:64:ed:77:7b:
5f:43:71:e7:d0:2e:e7:ea:22:46:aa:51:2a:bb:1e:2a:5b:c1:
22:53:14:15:80:e3:64:bd:a8:28:5e:c7:66:d6:fa:bc:38:63:
bc:4a:f2:66:9d:c8:01:e6:0f:ee:10:f0:4a:23:96:37:cc:2d:
a5:0a:2e:a9:07:84:a9:98:dc:f6:9b:2e:2a:3f:da:db:fd:c6:
b3:65:08:9c:fd:b2:19:8c:a7:29:ee:09:94:61:37:de:63:bd:
e5:7f:c9:4b:7d:f0:2c:6e:bc:49:72:38:bb:12:f9:db:c6:ee:
81:c9:db:2b:2f:39:31:c2:d0:61:fa:1c:83:a5:e8:c0:88:1a:
80:36:7f:25:1e:fb:f6:db:d5:1d:60:bd:59:eb:30:d5:8c:3f:
6d:d7:1f:e5:e3:ee:2a:b8:a2:7a:19:5e:7b:72:4d:e0:1f:a1:
63:d9:e4:a7:42:eb:fb:6b:06:db:de:6f:9d:3f:12:c7:03:88:
c1:33:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:52 2025 by rpki-client